org.apache.hadoop.hbase.security.access

Class SnapshotScannerHDFSAclHelper

java.lang.Object

org.apache.hadoop.hbase.security.access.SnapshotScannerHDFSAclHelper

All Implemented Interfaces:

Closeable, AutoCloseable

@InterfaceAudience.Private
public class SnapshotScannerHDFSAclHelper
extends Object
implements Closeable

A helper to modify or remove HBase granted user default and access HDFS ACLs over hFiles.

Field Summary

Fields

Modifier and Type	Field and Description
static String	ACL_SYNC_TO_HDFS_ENABLE
static String	ACL_SYNC_TO_HDFS_THREAD_NUMBER
static String	COMMON_DIRECTORY_PERMISSION
static String	COMMON_DIRECTORY_PERMISSION_DEFAULT
static String	SNAPSHOT_RESTORE_DIRECTORY_PERMISSION
static String	SNAPSHOT_RESTORE_DIRECTORY_PERMISSION_DEFAULT
static String	SNAPSHOT_RESTORE_TMP_DIR
static String	SNAPSHOT_RESTORE_TMP_DIR_DEFAULT

Constructor Summary

Constructors

Constructor and Description
SnapshotScannerHDFSAclHelper(org.apache.hadoop.conf.Configuration configuration, Connection connection)

Method Summary

Modifier and Type	Method and Description
boolean	addTableAcl(TableName tableName, Set<String> users, String operation) Add table user acls
void	close()
boolean	grantAcl(UserPermission userPermission, Set<String> skipNamespaces, Set<TableName> skipTables) Set acl when grant user permission
static boolean	isAclSyncToHdfsEnabled(org.apache.hadoop.conf.Configuration conf)
boolean	removeNamespaceAccessAcl(TableName tableName, Set<String> removeUsers, String operation) Remove table access acl from namespace dir when delete table
boolean	removeNamespaceDefaultAcl(String namespace, Set<String> removeUsers) Remove default acl from namespace archive dir when delete namespace
boolean	removeTableAcl(TableName tableName, Set<String> users) Remove table acls when modify table
boolean	removeTableDefaultAcl(TableName tableName, Set<String> removeUsers) Remove default acl from table archive dir when delete table
boolean	revokeAcl(UserPermission userPermission, Set<String> skipNamespaces, Set<TableName> skipTables) Remove acl when grant or revoke user permission
void	setCommonDirectoryPermission()
boolean	snapshotAcl(SnapshotDescription snapshot) Set acl when take a snapshot

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ACL_SYNC_TO_HDFS_ENABLE

public static final String ACL_SYNC_TO_HDFS_ENABLE

See Also:

Constant Field Values

ACL_SYNC_TO_HDFS_THREAD_NUMBER

public static final String ACL_SYNC_TO_HDFS_THREAD_NUMBER

See Also:

Constant Field Values

SNAPSHOT_RESTORE_TMP_DIR

public static final String SNAPSHOT_RESTORE_TMP_DIR

See Also:

Constant Field Values

SNAPSHOT_RESTORE_TMP_DIR_DEFAULT

public static final String SNAPSHOT_RESTORE_TMP_DIR_DEFAULT

See Also:

Constant Field Values

COMMON_DIRECTORY_PERMISSION

public static final String COMMON_DIRECTORY_PERMISSION

See Also:

Constant Field Values

COMMON_DIRECTORY_PERMISSION_DEFAULT

public static final String COMMON_DIRECTORY_PERMISSION_DEFAULT

See Also:

Constant Field Values

SNAPSHOT_RESTORE_DIRECTORY_PERMISSION

public static final String SNAPSHOT_RESTORE_DIRECTORY_PERMISSION

See Also:

Constant Field Values

SNAPSHOT_RESTORE_DIRECTORY_PERMISSION_DEFAULT

public static final String SNAPSHOT_RESTORE_DIRECTORY_PERMISSION_DEFAULT

See Also:

Constant Field Values

Constructor Detail

SnapshotScannerHDFSAclHelper

public SnapshotScannerHDFSAclHelper(org.apache.hadoop.conf.Configuration configuration,
                                    Connection connection)
                             throws IOException

Throws:

IOException

Method Detail

close

public void close()

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable

setCommonDirectoryPermission

public void setCommonDirectoryPermission()
                                  throws IOException

Throws:

IOException

grantAcl

public boolean grantAcl(UserPermission userPermission,
                        Set<String> skipNamespaces,
                        Set<TableName> skipTables)

Set acl when grant user permission

Parameters:

userPermission - the user and permission

skipNamespaces - the namespace set to skip set acl because already set

skipTables - the table set to skip set acl because already set

Returns:

false if an error occurred, otherwise true

revokeAcl

public boolean revokeAcl(UserPermission userPermission,
                         Set<String> skipNamespaces,
                         Set<TableName> skipTables)

Remove acl when grant or revoke user permission

Parameters:

userPermission - the user and permission

skipNamespaces - the namespace set to skip remove acl

skipTables - the table set to skip remove acl

Returns:

false if an error occurred, otherwise true

snapshotAcl

public boolean snapshotAcl(SnapshotDescription snapshot)

Set acl when take a snapshot

Parameters:

snapshot - the snapshot desc

Returns:

false if an error occurred, otherwise true

removeNamespaceAccessAcl

public boolean removeNamespaceAccessAcl(TableName tableName,
                                        Set<String> removeUsers,
                                        String operation)

Remove table access acl from namespace dir when delete table

Parameters:

tableName - the table

removeUsers - the users whose access acl will be removed

Returns:

false if an error occurred, otherwise true

removeNamespaceDefaultAcl

public boolean removeNamespaceDefaultAcl(String namespace,
                                         Set<String> removeUsers)

Remove default acl from namespace archive dir when delete namespace

Parameters:

namespace - the namespace

removeUsers - the users whose default acl will be removed

Returns:

false if an error occurred, otherwise true

removeTableDefaultAcl

public boolean removeTableDefaultAcl(TableName tableName,
                                     Set<String> removeUsers)

Remove default acl from table archive dir when delete table

Parameters:

tableName - the table name

removeUsers - the users whose default acl will be removed

Returns:

false if an error occurred, otherwise true

addTableAcl

public boolean addTableAcl(TableName tableName,
                           Set<String> users,
                           String operation)

Add table user acls

Parameters:

tableName - the table

users - the table users with READ permission

Returns:

false if an error occurred, otherwise true

removeTableAcl

public boolean removeTableAcl(TableName tableName,
                              Set<String> users)

Remove table acls when modify table

Parameters:

tableName - the table

users - the table users with READ permission

Returns:

false if an error occurred, otherwise true

isAclSyncToHdfsEnabled

public static boolean isAclSyncToHdfsEnabled(org.apache.hadoop.conf.Configuration conf)